Wednesday, April 17, 2024

WordPress vulnerable to Cross-Site Request Forgery in Connection Information – Not yet fixed with last Update

[jpshare] Wordpress vulnerable to Cross-Site Request Forgery in Connection Information – Not yet fixed with the last Update.

WordPress is a free online Open source content Managed system focused on PHP and MySQL. It is one the powerful and most used blogging tool.

This CSRF issue has been found in Summer of Pwnage hack event which held between July 1-29.

CSRF Vulnerability:

CSRF holds number eight in OWSAP top 10 list.Cross Site Request Forgery is one of the most common forms of attack by online spammers and scammers.

Exploicity of this attack is bit complex, it’s prevalence is common.But CSRF attacks can be predicted easily. Read More about CSRF.

CSRF in WordPress Communication

The FTP/SSH functionality of WordPress was observed to be defenseless to Cross-Site Request Forgery. This weakness can be utilized to overwrite the FTP or SSH association settings of the infected WordPress site.

An assailant can utilize this issue to trap an Administrator into signing into the attacker’s FTP or SSH server, revealing his/her login credentials to the attacker.

In order to exploit this vulnerability, the attacker needs to force a signed on WordPress Administrator into opening a malicious website.

OVE ID : OVE-20160717-0004

Affected version

This issue was effectively tried on the WordPress from 4.5.3 up till and including version 4.7.4(which is the current version).

Fix

Currently no fix available for this vulnerability with most recent 

version 4.7.4(released on April 20, 2017).

CSRF Code Analysis with POC

This issue exists in the method

request_filesystem_credentials() (/wp-admin/includes/file.php)

. It allows overwriting of the values:

It allows overwriting of the values:

– hostname
– username
– connection_type

The request_filesystem_credentials() method is called in various locations in WordPress.You can get complete POC here

Also Read:

Website

Latest articles

Trustifi’s Email Security Awareness Training – Empowering MSPs to Train & Protect Clients

In today's digital landscape, email security has become a critical concern for businesses of...

Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group

In a digital age where information is the new currency, the recent global hack...

Ex-Security Engineer Jailed For Hacking Decentralized Cryptocurrency Exchanges

Ahmed exploited a vulnerability in a decentralized cryptocurrency exchange's smart contract by injecting fabricated...

Omni Hotels & Resorts Hack: Attackers have Stolen Customer Information

Omni Hotels & Resorts has revealed that it was the target of a recent...

Connect:fun Attacking Organizations Running Fortinet’s FortiClient EMS

A new exploit campaign has emerged, targeting organizations that utilize Fortinet’s FortiClient EMS.Dubbed...

TA558 Hackers Compromised 320+ Organizations’ FTP & SMTP Servers

TA558, a financially motivated threat actor identified in 2018, is targeting several countries but...

Blackjack Hackers Destroyed 87,000 Sensors Using Lethal ICS Malware

A group of cybercriminals known as "Blackjack" has launched a devastating attack on industrial...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Top 3 SME Attack Vectors

Securing the Top 3 SME Attack Vectors

Cybercriminals are laying siege to small-to-medium enterprises (SMEs) across sectors. 73% of SMEs know they were breached in 2023. The real rate could be closer to 100%.

  • Stolen credentials
  • Phishing
  • Exploitation of vulnerabilities

Related Articles